crates.io/cosmwasm-vm: medium
CosmWasm VM Incorrect metering
Action: Upgrade cosmwasm-vm to 1.5.8 or later.
cargo update -p cosmwasm-vm --precise 2.1.4cargo update -p cosmwasm-vm --precise 2.0.7cargo update -p cosmwasm-vm --precise 1.5.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.1.4 | - |
| 2.0.0 | 2.0.7 | - |
| 0 | 1.5.8 | - |
Fixed versions
| 2.1.4 | 2.0.7 | 1.5.8 |
Sources
- osv: GHSA-2q97-m5rc-p3gp#crates.io/cosmwasm-vm
- https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-2q97-m5rc-p3gp
- https://github.com/CosmWasm/cosmwasm/commit/0e70bd83119b02f99a2c0397f0913e0803750fd9
- https://github.com/CosmWasm/cosmwasm/commit/16eabd681790508b13dac8e67f9e6e61045240ea
- https://github.com/CosmWasm/cosmwasm/commit/f5bf24f3acadca2892afd58cc3ce5fdeb932d492
- https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-007.md
- https://github.com/CosmWasm/wasmvm
published · modified · JSON